2 Commits (744ae82933a7e4d34582ffccfd963d24dbbf1308)

Author	SHA1	Message	Date
Ville Skyttä	5e2ba2eb77	Enable some more bandit checks (#30857) ... * Enable B108 (hardcoded tmp dir), address findings * Enable B602 (subprocess popen with shell), address findings * Enable B604 (start process with shell), address findings * Enable B306 (mktemp), B307 (eval), and B325 (tempnam), no issues to address	2020-01-20 18:44:55 +02:00
Ville Skyttä	d4c80f160c	Add bandit, use to catch known vulnerable XML parsing (#28341) ... * Add bandit to pre-commit and CI, use to catch known vulnerable XML parsing * Use defusedxml instead of direct xml.etree to parse XML * Move config to tests/bandit.yaml	2019-11-18 09:10:15 +01:00